Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3231322e302f32322d3232203d3e20323632363931.roa
File:                     3138362e3139342e3231322e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          zVnL461mBpkGo2L5yu89MCHLlHR9A/SkjPAn3+Wgkpc=
Subject key identifier:   58:05:58:21:24:1A:34:09:4E:E4:04:C7:4F:9B:46:A7:46:A0:03:0D
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       48DAC13A7E26E306DEA195C23903AC065AB2BB48
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3231322e302f32322d3232203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:17 +0000
ROA not before:           Sat 16 Oct 2021 16:11:17 +0000
ROA not after:            Sat 15 Oct 2022 16:16:17 +0000
asID:                     262691
IP address blocks:        186.194.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:da:c1:3a:7e:26:e3:06:de:a1:95:c2:39:03:ac:06:5a:b2:bb:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:17 2021 GMT
            Not After : Oct 15 16:16:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:79:01:f7:e7:f9:1f:8c:92:e1:01:66:82:22:
                    bc:93:24:44:d8:e9:af:8b:f1:1a:2e:d2:ca:dc:f1:
                    3c:82:ae:21:33:62:62:27:b6:18:11:3b:5e:9e:c1:
                    57:d3:88:f7:b8:1c:83:54:2e:f4:cb:86:89:8c:1a:
                    25:52:06:74:20:db:8f:30:80:db:59:74:b6:29:ad:
                    03:bb:47:1f:39:83:6d:08:88:27:2a:29:1b:bf:c3:
                    e1:a2:e4:e9:4a:c5:bf:3d:c2:6b:e5:1d:4b:52:0c:
                    8e:92:f9:9d:86:8c:d5:9a:c0:19:68:aa:14:48:1f:
                    6c:a5:5d:07:ac:de:b1:3b:95:03:71:c9:46:bb:3e:
                    4e:2c:69:88:4f:48:9a:fa:d5:33:c7:a4:ea:d2:c2:
                    2b:35:35:a8:ab:6f:d4:67:17:be:39:d3:0b:f9:0e:
                    b0:32:42:e5:c8:39:a3:fa:82:31:7c:84:42:1d:60:
                    2d:9e:50:0d:5f:0b:28:57:72:f8:4b:7c:73:e4:2d:
                    fb:3b:5f:9f:c5:85:35:10:7c:fb:0a:f3:48:53:54:
                    91:ce:8c:0e:16:a1:86:ba:0c:86:20:95:f4:18:21:
                    19:f2:57:e4:08:e5:b0:88:3a:c8:76:0c:a9:dd:3d:
                    69:e8:9c:5c:e2:e4:af:86:98:a3:24:ed:d6:9f:f3:
                    ab:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:05:58:21:24:1A:34:09:4E:E4:04:C7:4F:9B:46:A7:46:A0:03:0D
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3231322e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:a9:75:7a:e4:ca:3c:e9:1c:4c:66:b0:1c:b6:49:b1:a0:a5:
         6b:f5:cc:20:16:db:22:c1:ed:e5:03:83:17:a6:7f:0f:5c:b6:
         34:11:9f:5a:73:a7:be:10:4d:9f:d7:54:b9:58:b2:c8:15:c4:
         1c:35:96:07:32:70:40:6d:9f:4f:1e:61:b9:d9:b5:a5:9c:9a:
         f4:86:7c:8f:37:ff:60:2b:f1:d2:66:22:23:f9:24:68:37:5c:
         e8:40:d4:e4:1e:10:df:de:21:ab:f1:87:b5:ab:a0:d9:5d:b9:
         3a:1e:fd:5b:ca:dc:5d:72:1e:e6:eb:bd:65:a7:42:af:f4:6b:
         b4:52:8e:f9:76:28:e4:00:6e:dd:eb:57:68:46:27:5a:3b:e7:
         bc:c3:d6:03:2e:ca:b0:e7:f8:dd:95:4a:cb:a8:ce:f0:75:be:
         c5:8b:01:c5:84:47:53:d0:8d:b2:41:4e:08:a5:95:f9:2a:d5:
         d4:c6:57:19:44:fc:2a:7e:74:bc:8e:20:72:8e:59:f5:57:75:
         e3:c7:09:a0:e4:04:02:25:a1:bd:8b:74:ea:4a:13:59:9b:fe:
         af:33:23:06:81:1e:cb:4b:67:76:da:3b:a9:87:03:c5:9c:db:
         07:cc:8a:4a:9f:73:c5:6e:ee:ef:77:da:fd:a5:74:05:55:c4:
         bd:54:18:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org